As per the Activity Filter plugin, it only hides them with bp_ajax_querystring, all activity type still get recorded inside the database. You can also check it’s live working here https://www.youtube.com/watch?v=fTwzSN1y61o

@whoam7i7 your request is more specific to 3rd party plugins
for point 1 check with rtMedia as you need to save members avatar inside rtMedia private album and point 2 Capability Manager Enhanced plugin support